📦 Open Source Point Of Sale
by Opensourcepos
🔍 What is Open Source Point Of Sale?
Description coming soon...
🛡️ Security Overview
Click on a severity to filter vulnerabilities
⚠️ Known Vulnerabilities
OpenSourcePOS 3.4.1 contains a Local File Inclusion vulnerability that allows attackers to read arbitrary files on the web server by manipulating invoice type settings. This can be combined with file ...
This vulnerability in OpenSourcePOS v3.4.1 allows attackers to execute arbitrary code on the server by sending a specially crafted AJAX response. This affects all systems running the vulnerable versio...
A Cross-Site Request Forgery (CSRF) vulnerability in Open Source Point of Sale (OSPOS) allows unauthenticated attackers to create administrator accounts when logged-in administrators visit malicious w...
A stored XSS vulnerability in Open Source Point of Sale allows attackers with administrative access to inject malicious JavaScript into the Return Policy field. This code executes when users view rece...
This Cross-site scripting (XSS) vulnerability in Open Source Point of Sale v3.4.1 allows remote attackers to inject malicious scripts via the phone_number parameter when creating or updating customer ...
This Cross-site scripting (XSS) vulnerability in Open Source Point of Sale v3.4.1 allows remote attackers to inject malicious scripts via the 'name' parameter in the Create/Update Item(s) module. Atta...
This vulnerability allows authenticated users to set their account password to an empty string via the password change endpoint in Open Source Point of Sale 3.4.1. This disables authentication and cou...
This cross-site scripting (XSS) vulnerability in OpenSourcePOS v3.4.1 allows attackers to inject malicious scripts into item management and sales invoice functions. When exploited, it enables executio...
This cross-site scripting (XSS) vulnerability in OpenSourcePOS allows attackers to inject malicious scripts into the Item Category parameter during barcode generation. When exploited, it enables execu...
This Cross-site scripting (XSS) vulnerability in Open Source Point of Sale allows attackers to inject malicious scripts into the 'name' parameter when creating or updating item kits. This affects user...